@cat-factory/server 0.6.0

package/dist/modules/boardScan/BoardScanController.js

@@ -0,0 +1,53 @@
+import { scanRepoSchema } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the board-scan module or send a 503, returning null when unconfigured. */
+function requireBoardScan(c) {
+    return c.get('container').boardScan ?? null;
+}
+const unavailable = (c, message) => c.json({ error: { code: 'unavailable', message } }, 503);
+/**
+ * Workspace-scoped board-scan endpoints: read the persisted repository blueprints,
+ * and the "scan repository" command (decompose a repo into a service → modules
+ * blueprint, optionally spawning it onto the board). Mounted under
+ * `/workspaces/:workspaceId`.
+ */
+export function boardScanController() {
+    const app = new Hono();
+    // ---- blueprints ---------------------------------------------------------
+    app.get('/board-scan/blueprints', async (c) => {
+        const boardScan = requireBoardScan(c);
+        if (!boardScan)
+            return unavailable(c, 'Board scan is not configured');
+        return c.json(await boardScan.service.listBlueprints(param(c, 'workspaceId')));
+    });
+    app.get('/board-scan/blueprints/:id', async (c) => {
+        const boardScan = requireBoardScan(c);
+        if (!boardScan)
+            return unavailable(c, 'Board scan is not configured');
+        return c.json(await boardScan.service.getBlueprint(param(c, 'workspaceId'), param(c, 'id')));
+    });
+    app.delete('/board-scan/blueprints/:id', async (c) => {
+        const boardScan = requireBoardScan(c);
+        if (!boardScan)
+            return unavailable(c, 'Board scan is not configured');
+        await boardScan.service.deleteBlueprint(param(c, 'workspaceId'), param(c, 'id'));
+        return c.body(null, 204);
+    });
+    // ---- scan ---------------------------------------------------------------
+    // Kick off a scan. Requires the GitHub + container machinery to be wired;
+    // otherwise the scan path is unavailable even though blueprint reads work.
+    app.post('/board-scan/scans', jsonBody(scanRepoSchema), async (c) => {
+        const boardScan = requireBoardScan(c);
+        if (!boardScan)
+            return unavailable(c, 'Board scan is not configured');
+        if (!boardScan.service.canScan) {
+            return unavailable(c, 'Repository scanning needs the GitHub App and the implementation container to be configured');
+        }
+        const result = await boardScan.service.scan(param(c, 'workspaceId'), c.req.valid('json'));
+        return c.json(result, 201);
+    });
+    return app;
+}
+//# sourceMappingURL=BoardScanController.js.map

package/dist/modules/boardScan/BoardScanController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BoardScanController.js","sourceRoot":"","sources":["../../../src/modules/boardScan/BoardScanController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,CAAkB;IAC1C,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS,IAAI,IAAI,CAAA;AAC7C,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,OAAe,EAAE,EAAE,CAC1D,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAA;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAA;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAA;QACrE,MAAM,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QAChF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,0EAA0E;IAC1E,2EAA2E;IAC3E,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClE,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAA;QACrE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,WAAW,CAChB,CAAC,EACD,4FAA4F,CAC7F,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACzF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/bootstrap/BootstrapController.d.ts

@@ -0,0 +1,10 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Workspace-scoped repo-bootstrap endpoints: CRUD over the managed reference
+ * architecture list, and the "bootstrap repo" task (create a new repo from a
+ * reference architecture and run the bootstrapper agent in a container). Mounted
+ * under `/workspaces/:workspaceId`.
+ */
+export declare function bootstrapController(): Hono<AppEnv>;
+//# sourceMappingURL=BootstrapController.d.ts.map

package/dist/modules/bootstrap/BootstrapController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BootstrapController.d.ts","sourceRoot":"","sources":["../../../src/modules/bootstrap/BootstrapController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAY/C;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,CAgFlD"}

package/dist/modules/bootstrap/BootstrapController.js

@@ -0,0 +1,75 @@
+import { bootstrapRepoSchema, createReferenceArchitectureSchema, updateReferenceArchitectureSchema, } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the bootstrap module or send a 503, returning null when unconfigured. */
+function requireBootstrap(c) {
+    return c.get('container').bootstrap ?? null;
+}
+const unavailable = (c, message) => c.json({ error: { code: 'unavailable', message } }, 503);
+/**
+ * Workspace-scoped repo-bootstrap endpoints: CRUD over the managed reference
+ * architecture list, and the "bootstrap repo" task (create a new repo from a
+ * reference architecture and run the bootstrapper agent in a container). Mounted
+ * under `/workspaces/:workspaceId`.
+ */
+export function bootstrapController() {
+    const app = new Hono();
+    // ---- reference architectures -------------------------------------------
+    app.get('/bootstrap/reference-architectures', async (c) => {
+        const bootstrap = requireBootstrap(c);
+        if (!bootstrap)
+            return unavailable(c, 'Repo bootstrap is not configured');
+        return c.json(await bootstrap.service.listReferenceArchitectures(param(c, 'workspaceId')));
+    });
+    app.post('/bootstrap/reference-architectures', jsonBody(createReferenceArchitectureSchema), async (c) => {
+        const bootstrap = requireBootstrap(c);
+        if (!bootstrap)
+            return unavailable(c, 'Repo bootstrap is not configured');
+        const created = await bootstrap.service.createReferenceArchitecture(param(c, 'workspaceId'), c.req.valid('json'));
+        return c.json(created, 201);
+    });
+    app.patch('/bootstrap/reference-architectures/:id', jsonBody(updateReferenceArchitectureSchema), async (c) => {
+        const bootstrap = requireBootstrap(c);
+        if (!bootstrap)
+            return unavailable(c, 'Repo bootstrap is not configured');
+        const updated = await bootstrap.service.updateReferenceArchitecture(param(c, 'workspaceId'), param(c, 'id'), c.req.valid('json'));
+        return c.json(updated);
+    });
+    app.delete('/bootstrap/reference-architectures/:id', async (c) => {
+        const bootstrap = requireBootstrap(c);
+        if (!bootstrap)
+            return unavailable(c, 'Repo bootstrap is not configured');
+        await bootstrap.service.deleteReferenceArchitecture(param(c, 'workspaceId'), param(c, 'id'));
+        return c.body(null, 204);
+    });
+    // ---- bootstrap jobs -----------------------------------------------------
+    app.get('/bootstrap/jobs', async (c) => {
+        const bootstrap = requireBootstrap(c);
+        if (!bootstrap)
+            return unavailable(c, 'Repo bootstrap is not configured');
+        return c.json(await bootstrap.service.listJobs(param(c, 'workspaceId')));
+    });
+    app.get('/bootstrap/jobs/:id', async (c) => {
+        const bootstrap = requireBootstrap(c);
+        if (!bootstrap)
+            return unavailable(c, 'Repo bootstrap is not configured');
+        return c.json(await bootstrap.service.getJob(param(c, 'workspaceId'), param(c, 'id')));
+    });
+    // Kick off a bootstrap run. Requires the GitHub + container machinery to be
+    // wired; otherwise the run path is unavailable even though CRUD works.
+    app.post('/bootstrap/jobs', jsonBody(bootstrapRepoSchema), async (c) => {
+        const bootstrap = requireBootstrap(c);
+        if (!bootstrap)
+            return unavailable(c, 'Repo bootstrap is not configured');
+        if (!bootstrap.service.canBootstrap) {
+            return unavailable(c, 'Repo bootstrapping needs the GitHub App and the implementation container to be configured');
+        }
+        const job = await bootstrap.service.bootstrap(param(c, 'workspaceId'), c.req.valid('json'));
+        return c.json(job, 201);
+    });
+    // Retrying a failed run goes through the unified `POST /agent-runs/:id/retry`
+    // (see AgentRunController), which resolves the kind and re-drives this flow.
+    return app;
+}
+//# sourceMappingURL=BootstrapController.js.map

package/dist/modules/bootstrap/BootstrapController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BootstrapController.js","sourceRoot":"","sources":["../../../src/modules/bootstrap/BootstrapController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,CAAkB;IAC1C,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS,IAAI,IAAI,CAAA;AAC7C,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,OAAe,EAAE,EAAE,CAC1D,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,2EAA2E;IAE3E,GAAG,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CACN,oCAAoC,EACpC,QAAQ,CAAC,iCAAiC,CAAC,EAC3C,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,2BAA2B,CACjE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,GAAG,CAAC,KAAK,CACP,wCAAwC,EACxC,QAAQ,CAAC,iCAAiC,CAAC,EAC3C,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,2BAA2B,CACjE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC,CACF,CAAA;IAED,GAAG,CAAC,MAAM,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACzE,MAAM,SAAS,CAAC,OAAO,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,uEAAuE;IACvE,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrE,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACzE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO,WAAW,CAChB,CAAC,EACD,2FAA2F,CAC5F,CAAA;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3F,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,6EAA6E;IAE7E,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/clarity/ClarityReviewController.d.ts

@@ -0,0 +1,11 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Workspace-scoped clarity-review (bug-report triage) endpoints. The clarity mirror of the
+ * requirements-review controller: the initial review runs an LLM inline and returns the
+ * entity; incorporation is ASYNCHRONOUS (records the intent on the parked run, signals the
+ * durable driver to fold + re-review, returns at once with the `incorporating` review).
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export declare function clarityReviewController(): Hono<AppEnv>;
+//# sourceMappingURL=ClarityReviewController.d.ts.map

package/dist/modules/clarity/ClarityReviewController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClarityReviewController.d.ts","sourceRoot":"","sources":["../../../src/modules/clarity/ClarityReviewController.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAY/C;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAAC,MAAM,CAAC,CAkHtD"}

package/dist/modules/clarity/ClarityReviewController.js

@@ -0,0 +1,97 @@
+import { incorporateClaritySchema, replyClarityItemSchema, resolveClarityExceededSchema, updateClarityItemStatusSchema, } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the clarity module or send a 503, returning null when unconfigured. */
+function requireClarity(c) {
+    return c.get('container').clarity ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Clarity review is not configured' } }, 503);
+/**
+ * Workspace-scoped clarity-review (bug-report triage) endpoints. The clarity mirror of the
+ * requirements-review controller: the initial review runs an LLM inline and returns the
+ * entity; incorporation is ASYNCHRONOUS (records the intent on the parked run, signals the
+ * durable driver to fold + re-review, returns at once with the `incorporating` review).
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export function clarityReviewController() {
+    const app = new Hono();
+    // The current review for a block (null when none has been run yet).
+    app.get('/blocks/:blockId/clarity-review', async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await clarity.service.getForBlock(param(c, 'workspaceId'), param(c, 'blockId'));
+        return c.json(review);
+    });
+    // Run a fresh triage of the block's bug report (replaces any prior). Routed through the
+    // execution service so the off-path surface honours the task's merge-preset knobs and
+    // threads in any upstream investigator output, exactly like the gate.
+    app.post('/blocks/:blockId/clarity-review', async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await c
+            .get('container')
+            .executionService.reviewClarity(param(c, 'workspaceId'), param(c, 'blockId'));
+        return c.json(review, 201);
+    });
+    // Answer a single review item.
+    app.post('/clarity-reviews/:reviewId/items/:itemId/reply', jsonBody(replyClarityItemSchema), async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await clarity.service.replyToItem(param(c, 'workspaceId'), param(c, 'reviewId'), param(c, 'itemId'), c.req.valid('json').reply);
+        return c.json(review);
+    });
+    // Set a review item's status (resolve / dismiss / reopen).
+    app.patch('/clarity-reviews/:reviewId/items/:itemId', jsonBody(updateClarityItemStatusSchema), async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await clarity.service.setItemStatus(param(c, 'workspaceId'), param(c, 'reviewId'), param(c, 'itemId'), c.req.valid('json').status);
+        return c.json(review);
+    });
+    // Incorporate the answers ASYNCHRONOUSLY (the durable driver folds + re-reviews).
+    app.post('/blocks/:blockId/clarity-review/incorporate', jsonBody(incorporateClaritySchema), async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await c
+            .get('container')
+            .executionService.incorporateClarity(param(c, 'workspaceId'), param(c, 'blockId'), c.req.valid('json').feedback);
+        return c.json(review);
+    });
+    // Re-review the clarified report (one more reviewer pass).
+    app.post('/blocks/:blockId/clarity-review/re-review', async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await c
+            .get('container')
+            .executionService.reReviewClarity(param(c, 'workspaceId'), param(c, 'blockId'));
+        return c.json(review);
+    });
+    // Proceed: settle the clarity review (last clarified report wins downstream) and advance.
+    app.post('/blocks/:blockId/clarity-review/proceed', async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await c
+            .get('container')
+            .executionService.proceedClarity(param(c, 'workspaceId'), param(c, 'blockId'));
+        return c.json(review);
+    });
+    // Resolve a review that hit its iteration cap: one more round / proceed / stop-reset.
+    app.post('/blocks/:blockId/clarity-review/resolve-exceeded', jsonBody(resolveClarityExceededSchema), async (c) => {
+        const clarity = requireClarity(c);
+        if (!clarity)
+            return unavailable(c);
+        const review = await c
+            .get('container')
+            .executionService.resolveClarityExceeded(param(c, 'workspaceId'), param(c, 'blockId'), c.req.valid('json').choice);
+        return c.json(review);
+    });
+    return app;
+}
+//# sourceMappingURL=ClarityReviewController.js.map

package/dist/modules/clarity/ClarityReviewController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClarityReviewController.js","sourceRoot":"","sources":["../../../src/modules/clarity/ClarityReviewController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,kFAAkF;AAClF,SAAS,cAAc,CAAC,CAAkB;IACxC,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,IAAI,IAAI,CAAA;AAC3C,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE9F;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,oEAAoE;IACpE,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QAC9F,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,wFAAwF;IACxF,sFAAsF;IACtF,sEAAsE;IACtE,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,+BAA+B;IAC/B,GAAG,CAAC,IAAI,CACN,gDAAgD,EAChD,QAAQ,CAAC,sBAAsB,CAAC,EAChC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAC9C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EACpB,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAC1B,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CACF,CAAA;IAED,2DAA2D;IAC3D,GAAG,CAAC,KAAK,CACP,0CAA0C,EAC1C,QAAQ,CAAC,6BAA6B,CAAC,EACvC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAChD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EACpB,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CACF,CAAA;IAED,kFAAkF;IAClF,GAAG,CAAC,IAAI,CACN,6CAA6C,EAC7C,QAAQ,CAAC,wBAAwB,CAAC,EAClC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,kBAAkB,CAClC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EACnB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAC7B,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CACF,CAAA;IAED,2DAA2D;IAC3D,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChE,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QACjF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,0FAA0F;IAC1F,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QAChF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,sFAAsF;IACtF,GAAG,CAAC,IAAI,CACN,kDAAkD,EAClD,QAAQ,CAAC,4BAA4B,CAAC,EACtC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,sBAAsB,CACtC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EACnB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CACF,CAAA;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/consensus/ConsensusController.d.ts

@@ -0,0 +1,12 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Read-only consensus endpoints (the optional `@cat-factory/consensus` mechanism). The
+ * live transcript is pushed via the `consensus` workspace event; this lets a window
+ * load the latest session for a block on open / after a reload. Returns `{ session: null }`
+ * when the consensus repository isn't wired or no session has run for the block — never a
+ * hard error, so the SPA degrades gracefully when consensus is off. Mounted under
+ * `/workspaces/:workspaceId`.
+ */
+export declare function consensusController(): Hono<AppEnv>;
+//# sourceMappingURL=ConsensusController.d.ts.map

package/dist/modules/consensus/ConsensusController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConsensusController.d.ts","sourceRoot":"","sources":["../../../src/modules/consensus/ConsensusController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAG/C;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,CAYlD"}

package/dist/modules/consensus/ConsensusController.js

@@ -0,0 +1,23 @@
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+/**
+ * Read-only consensus endpoints (the optional `@cat-factory/consensus` mechanism). The
+ * live transcript is pushed via the `consensus` workspace event; this lets a window
+ * load the latest session for a block on open / after a reload. Returns `{ session: null }`
+ * when the consensus repository isn't wired or no session has run for the block — never a
+ * hard error, so the SPA degrades gracefully when consensus is off. Mounted under
+ * `/workspaces/:workspaceId`.
+ */
+export function consensusController() {
+    const app = new Hono();
+    // The most recent consensus session for a block (null when none / not configured).
+    app.get('/blocks/:blockId/consensus-session', async (c) => {
+        const repo = c.get('container').consensusSessionRepository;
+        if (!repo)
+            return c.json({ session: null });
+        const session = await repo.getByBlock(param(c, 'workspaceId'), param(c, 'blockId'));
+        return c.json({ session });
+    });
+    return app;
+}
+//# sourceMappingURL=ConsensusController.js.map

package/dist/modules/consensus/ConsensusController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConsensusController.js","sourceRoot":"","sources":["../../../src/modules/consensus/ConsensusController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,mFAAmF;IACnF,GAAG,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,0BAA0B,CAAA;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QACnF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/documents/DocumentSourceController.d.ts

@@ -0,0 +1,10 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Workspace-scoped, source-parameterized document endpoints: source discovery,
+ * connection management, page import, document listing, structure
+ * planning/spawning, and linking a page to a block as agent context. Mounted
+ * under `/workspaces/:workspaceId`.
+ */
+export declare function documentSourceController(): Hono<AppEnv>;
+//# sourceMappingURL=DocumentSourceController.d.ts.map

package/dist/modules/documents/DocumentSourceController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DocumentSourceController.d.ts","sourceRoot":"","sources":["../../../src/modules/documents/DocumentSourceController.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAwB/C;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAAC,MAAM,CAAC,CA4HvD"}

package/dist/modules/documents/DocumentSourceController.js

@@ -0,0 +1,116 @@
+import { connectDocumentSourceSchema, documentSourceKindSchema, importDocumentSchema, linkDocumentSchema, planDocumentSchema, searchDocumentsSchema, spawnDocumentSchema, } from '@cat-factory/contracts';
+import * as v from 'valibot';
+import { Hono } from 'hono';
+import { ValidationError } from '@cat-factory/kernel';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the documents module or send a 503, returning null when unconfigured. */
+function requireDocuments(c) {
+    return c.get('container').documents ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Document-source integration is not configured' } }, 503);
+/** Read + validate the `:source` path param as a known source kind. */
+function sourceParam(c) {
+    const source = param(c, 'source');
+    if (!v.is(documentSourceKindSchema, source)) {
+        throw new ValidationError(`Unknown document source '${source}'`);
+    }
+    return source;
+}
+/**
+ * Workspace-scoped, source-parameterized document endpoints: source discovery,
+ * connection management, page import, document listing, structure
+ * planning/spawning, and linking a page to a block as agent context. Mounted
+ * under `/workspaces/:workspaceId`.
+ */
+export function documentSourceController() {
+    const app = new Hono();
+    // ---- source discovery ---------------------------------------------------
+    // The configured sources + their connect/import metadata (drives the UI). A
+    // 503 here is how the frontend learns the integration is off.
+    app.get('/document-sources', async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        return c.json({ sources: documents.connectionService.listSources() });
+    });
+    // ---- connections --------------------------------------------------------
+    app.get('/document-sources/connections', async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        const connections = await documents.connectionService.listConnections(param(c, 'workspaceId'));
+        return c.json({ connections });
+    });
+    app.post('/document-sources/:source/connect', jsonBody(connectDocumentSourceSchema), async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        const connection = await documents.connectionService.connect(param(c, 'workspaceId'), sourceParam(c), c.req.valid('json').credentials);
+        return c.json(connection, 201);
+    });
+    app.delete('/document-sources/:source/connection', async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        await documents.connectionService.disconnect(param(c, 'workspaceId'), sourceParam(c));
+        return c.body(null, 204);
+    });
+    // ---- documents ----------------------------------------------------------
+    app.get('/documents', async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        return c.json(await documents.importService.listDocuments(param(c, 'workspaceId')));
+    });
+    app.post('/document-sources/:source/import', jsonBody(importDocumentSchema), async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        const document = await documents.importService.import(param(c, 'workspaceId'), sourceParam(c), c.req.valid('json').ref);
+        return c.json(document, 201);
+    });
+    // Search a source's catalogue by free text (title/content), returning lean hits
+    // the picker can import + link on selection.
+    app.post('/document-sources/:source/search', jsonBody(searchDocumentsSchema), async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        const results = await documents.importService.search(param(c, 'workspaceId'), sourceParam(c), c.req.valid('json').query);
+        return c.json({ results });
+    });
+    // ---- planning / spawning ------------------------------------------------
+    // Preview the board structure a page would expand into (no writes).
+    app.post('/document-sources/:source/plan', jsonBody(planDocumentSchema), async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        const workspaceId = param(c, 'workspaceId');
+        const record = await documents.importService.requireDocument(workspaceId, sourceParam(c), c.req.valid('json').externalId);
+        return c.json(await documents.plannerService.plan(record));
+    });
+    // Apply a page's structure to the board (new frames, or into an existing one).
+    app.post('/document-sources/:source/spawn', jsonBody(spawnDocumentSchema), async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        const workspaceId = param(c, 'workspaceId');
+        const { externalId, frameId } = c.req.valid('json');
+        const record = await documents.importService.requireDocument(workspaceId, sourceParam(c), externalId);
+        const plan = await documents.plannerService.plan(record);
+        const result = await documents.linkService.spawn(workspaceId, plan, frameId);
+        return c.json({ plan, result }, 201);
+    });
+    // ---- context links ------------------------------------------------------
+    // Attach an imported page to a block as extra agent context.
+    app.post('/documents/link', jsonBody(linkDocumentSchema), async (c) => {
+        const documents = requireDocuments(c);
+        if (!documents)
+            return unavailable(c);
+        const { source, externalId, blockId } = c.req.valid('json');
+        const document = await documents.linkService.linkToBlock(param(c, 'workspaceId'), blockId, source, externalId);
+        return c.json(document, 201);
+    });
+    return app;
+}
+//# sourceMappingURL=DocumentSourceController.js.map

package/dist/modules/documents/DocumentSourceController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DocumentSourceController.js","sourceRoot":"","sources":["../../../src/modules/documents/DocumentSourceController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GAEpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAGrD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,CAAkB;IAC1C,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS,IAAI,IAAI,CAAA;AAC7C,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CACJ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,+CAA+C,EAAE,EAAE,EAC5F,GAAG,CACJ,CAAA;AAEH,uEAAuE;AACvE,SAAS,WAAW,CAAC,CAAkB;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CAAC,4BAA4B,MAAM,GAAG,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,4EAA4E;IAE5E,4EAA4E;IAC5E,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC9F,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CACN,mCAAmC,EACnC,QAAQ,CAAC,2BAA2B,CAAC,EACrC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAC1D,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,WAAW,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,CAChC,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CACF,CAAA;IAED,GAAG,CAAC,MAAM,CAAC,sCAAsC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;QACrF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvF,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,CACnD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,WAAW,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CACxB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,gFAAgF;IAChF,6CAA6C;IAC7C,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxF,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,CAClD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,WAAW,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAC1B,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,oEAAoE;IACpE,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnF,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,eAAe,CAC1D,WAAW,EACX,WAAW,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,CAC/B,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrF,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,eAAe,CAC1D,WAAW,EACX,WAAW,CAAC,CAAC,CAAC,EACd,UAAU,CACX,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,6DAA6D;IAC7D,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,WAAW,CACtD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,OAAO,EACP,MAAM,EACN,UAAU,CACX,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/environments/EnvironmentController.d.ts

@@ -0,0 +1,10 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Workspace-scoped environment endpoints: provider registration (manifest +
+ * encrypted secret bundle), the environment registry, manual provision/teardown,
+ * and the dedicated access endpoint that returns decrypted creds over TLS.
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export declare function environmentController(): Hono<AppEnv>;
+//# sourceMappingURL=EnvironmentController.d.ts.map

package/dist/modules/environments/EnvironmentController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvironmentController.d.ts","sourceRoot":"","sources":["../../../src/modules/environments/EnvironmentController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAkB/C;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAAC,MAAM,CAAC,CAgGpD"}

package/dist/modules/environments/EnvironmentController.js

@@ -0,0 +1,95 @@
+import { provisionEnvironmentSchema, registerEnvironmentProviderSchema, updateEnvironmentSecretsSchema, } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the environment module or send a 503, returning null when unconfigured. */
+function requireEnvironments(c) {
+    return c.get('container').environments ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Environment integration is not configured' } }, 503);
+const notFound = (c) => c.json({ error: { code: 'not_found', message: 'Environment not found' } }, 404);
+/**
+ * Workspace-scoped environment endpoints: provider registration (manifest +
+ * encrypted secret bundle), the environment registry, manual provision/teardown,
+ * and the dedicated access endpoint that returns decrypted creds over TLS.
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export function environmentController() {
+    const app = new Hono();
+    // ---- provider connection ------------------------------------------------
+    app.get('/environments/connection', async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        const connection = await env.connectionService.getConnection(param(c, 'workspaceId'));
+        return c.json({ connection });
+    });
+    app.post('/environments/connection', jsonBody(registerEnvironmentProviderSchema), async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        const { manifest, secrets } = c.req.valid('json');
+        const connection = await env.connectionService.register(param(c, 'workspaceId'), {
+            manifest,
+            secrets,
+        });
+        return c.json(connection, 201);
+    });
+    app.put('/environments/connection/secrets', jsonBody(updateEnvironmentSecretsSchema), async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        const connection = await env.connectionService.updateSecrets(param(c, 'workspaceId'), c.req.valid('json').secrets);
+        return c.json(connection);
+    });
+    app.delete('/environments/connection', async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        await env.connectionService.unregister(param(c, 'workspaceId'));
+        return c.body(null, 204);
+    });
+    // ---- environment registry ----------------------------------------------
+    app.get('/environments', async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        return c.json(await env.provisioningService.listHandles(param(c, 'workspaceId')));
+    });
+    app.get('/environments/:environmentId', async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        const handle = await env.provisioningService.getHandle(param(c, 'workspaceId'), param(c, 'environmentId'));
+        return handle ? c.json(handle) : notFound(c);
+    });
+    // The only endpoint that returns decrypted access credentials (over TLS).
+    app.get('/environments/:environmentId/access', async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        const handle = await env.provisioningService.getHandleWithAccess(param(c, 'workspaceId'), param(c, 'environmentId'));
+        return handle ? c.json(handle) : notFound(c);
+    });
+    app.post('/environments/provision', jsonBody(provisionEnvironmentSchema), async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        const { blockId, inputs } = c.req.valid('json');
+        const handle = await env.provisioningService.provision({
+            workspaceId: param(c, 'workspaceId'),
+            blockId,
+            inputs,
+        });
+        return c.json(handle, 201);
+    });
+    app.post('/environments/:environmentId/teardown', async (c) => {
+        const env = requireEnvironments(c);
+        if (!env)
+            return unavailable(c);
+        const handle = await env.teardownService.teardown(param(c, 'workspaceId'), param(c, 'environmentId'));
+        return c.json(handle);
+    });
+    return app;
+}
+//# sourceMappingURL=EnvironmentController.js.map

package/dist/modules/environments/EnvironmentController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvironmentController.js","sourceRoot":"","sources":["../../../src/modules/environments/EnvironmentController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,8BAA8B,GAC/B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,sFAAsF;AACtF,SAAS,mBAAmB,CAAC,CAAkB;IAC7C,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,YAAY,IAAI,IAAI,CAAA;AAChD,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CACJ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2CAA2C,EAAE,EAAE,EACxF,GAAG,CACJ,CAAA;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAkB,EAAE,EAAE,CACtC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QACrF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,iCAAiC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5F,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE;YAC/E,QAAQ;YACR,OAAO;SACR,CAAC,CAAA;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CACL,kCAAkC,EAClC,QAAQ,CAAC,8BAA8B,CAAC,EACxC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAC1D,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAC5B,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC,CACF,CAAA;IAED,GAAG,CAAC,MAAM,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,2EAA2E;IAE3E,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,SAAS,CACpD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAC1B,CAAA;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,mBAAmB,CAC9D,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAC1B,CAAA;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpF,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;YACrD,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;YACpC,OAAO;YACP,MAAM;SACP,CAAC,CAAA;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,QAAQ,CAC/C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAC1B,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/events/EventsController.d.ts

@@ -0,0 +1,26 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Real-time event stream: a WebSocket the SPA subscribes to for live
+ * execution/board updates. The connection is handed to the facade's
+ * {@link RealtimeGateway} (on the Worker: the per-workspace WorkspaceEventsHub
+ * Durable Object; on Node: a WebSocket hub), which holds the socket and broadcasts
+ * events the engine publishes.
+ *
+ * A browser can't set `Authorization` on a WebSocket handshake, so the handshake
+ * authenticates from a `?ticket=` query param. The ticket is NOT the long-lived
+ * session token (which would leak a full-API, multi-day credential into edge /
+ * proxy / Referer logs); it is a short-lived, single-workspace ticket the SPA
+ * mints over the authenticated REST channel via `POST .../events/ticket`. The
+ * ticket is audience-pinned (`ws`) and bound to one `workspaceId`, so it cannot
+ * be replayed as a session, against the LLM proxy, or for another workspace.
+ *
+ * The default-deny gate (in the facade's app) bypasses only the exact GET upgrade;
+ * the per-workspace authorization middleware enforces ownership on the POST mint.
+ *
+ * The ticket mint/verify primitives live in {@link ../../auth/wsTicket.js} so the Node
+ * facade (which handles the upgrade in its HTTP-server `upgrade` listener, not through
+ * this controller) authorises identically.
+ */
+export declare function eventsController(): Hono<AppEnv>;
+//# sourceMappingURL=EventsController.d.ts.map